Local Eop
The latest Local Eop coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2025-55224: Windows Win32K Race Condition Allows Hyper-V Escape and SYSTEM Access
A recently patched vulnerability in the Windows Win32K graphics subsystem allows an authenticated attacker—or a low-privileged process inside a Hyper-V virtual machine—to exploit a race condition...
Microsoft's Brokering File System Hit by Race Condition—Attackers Can Seize SYSTEM
Microsoft has confirmed a local elevation-of-privilege vulnerability in its Brokering File System that hands a low-privileged local user a pathway to full SYSTEM control. Tracked as CVE-2025-54105,...
Windows Firewall’s Memory Misfire: How CVE-2025-54094 Opens a Door to SYSTEM Privileges
A newly disclosed privilege escalation vulnerability in the Windows Defender Firewall Service allows attackers with a foothold on a system to seize complete control, elevating standard user...
PC Manager’s 7.8 CVSS Flaw Exposed: How Symlinks Give Attackers SYSTEM Rights
A vulnerability tracked as CVE-2025-29975 in Microsoft PC Manager hands local attackers a direct path to full SYSTEM control. With a CVSS 3.1 score of 7.8 (high) and a low attack complexity, the bug...
CVE-2025-50155: Critical Windows Push Notifications EoP Flaw Exposes Systems to Full Takeover
A serious elevation-of-privilege vulnerability in Windows Push Notifications has been cataloged as CVE-2025-50155 by Microsoft, giving authenticated local attackers a clear path to SYSTEM-level...
Actively Exploited Windows AFD.sys Flaw Earns CISA KEV Status Amid Patching Confusion
Microsoft’s February 2025 Patch Tuesday delivered a fix for CVE-2025-21418, a heap-based buffer overflow in the Windows Ancillary Function Driver (afd.sys), but sysadmins are grappling with a...
Microsoft Patches Critical DirectX Kernel Race Condition Exploit (CVE-2025-53135) Threatening Windows Systems
Microsoft has released a security update for a local privilege escalation vulnerability in the Windows DirectX Graphics Kernel, tracked as CVE-2025-53135. The flaw, residing in the dxgkrnl driver,...